Active Directory authentication WITHOUT SSO?

[randall_king2]

Everything I have found relating to Active Directory is based around getting SSO to work. Isn't there a halfway point that doesn't require touching every user and deploying complex config?

In simple terms I am looking to do this. I want to be able to set up a connection between the SAP application (not the GUI) and Active Directory, and have the user authentication be pulled from AD. We have dozens of systems and clients, and it would be really nice if we could set it up so that user SALES1234 (who also has a OFFICE\SALES1234 NT account), uses the same password in all systems.

Is there something that can be set up using the LDAP connector on the systems to either pull the passwords down to SAP, or authenticate against AD on the fly? It's not true SSO, but having a unified password strategy is a huge leap forward without having to invest in a huge project to touch users that are spread out globally.

Help? Any ideas?

Oh, I don't know much about AD, except ours uses Kerberos for authentication. Our systems are Solaris based.

Thanks in advance!

[hofmann]

Hi,

MS AD is, if you just look at the core, an LDAP Server. The UME supports LDAP.

SAP Help: http://help.sap.com/saphelp_nw04/helpdata/EN/eb/00954081efb90ee10000000a155106/frameset.htm

For getting access to the groups and user information in the MS AD LDAP, you'll need to know the exact location inside the LDAP. It is something like cn=users,ou=company,ou=com. You'll have to get this information from your AD administrator.

br,

Tobias

[dan_pfingsten2]

Was there a resolution to the question? is it possible to integrate AD into SAP without using SSO?